AS24-U1-000950 - The Apache web server must be configured in accordance with the security configuration settings based on DoD security configuration or implementation guidance, including STIGs, NSA configuration guides, CTOs, and DTMs.

Information

Configuring the Apache web server to implement organization-wide security implementation guides and security checklists guarantees compliance with federal standards and establishes a common security baseline across the DoD that reflects the most restrictive security posture consistent with operational requirements.

Configuration settings are the set of parameters that can be changed that affect the security posture and/or functionality of the system. Security-related parameters are parameters impacting the security state of the Apache web server, including those required to satisfy other security control requirements.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Ensure the website enforces the use of IANA well-known ports for 'HTTP' and 'HTTPS'.

Item Details

Audit Name: DISA STIG Apache Server 2.4 Unix Server v3r2 Middleware

Category: CONFIGURATION MANAGEMENT

Plugin: Unix

Control ID: 55a896a2867dc0dd598717ac37fdbe206439f981f31ad63946da95d5407b47aa

Detections

Analytics

AS24-U1-000950 - The Apache web server must be configured in accordance with the security configuration settings based on DoD security configuration or implementation guidance, including STIGs, NSA configuration guides, CTOs, and DTMs.

Information

Solution

See Also

Item Details